General

  • Target

    e9db4cc2ee2cc30ce031741b3904982a6ccb5c6304c3c19fea08930d2eabed55

  • Size

    72KB

  • Sample

    241107-gj8yjawhqb

  • MD5

    0ea7612673462ec14d19e2fc634b9577

  • SHA1

    104ddf8af8008be91b346bbb7bda36ec892bfb14

  • SHA256

    e9db4cc2ee2cc30ce031741b3904982a6ccb5c6304c3c19fea08930d2eabed55

  • SHA512

    b4a9b1da38152b22320c29f168710714de0e6c75b0d95418bd1de07966f677ac60f9ba7a1931a7b4f49df20ab1e407b4bc5d7de0b377ab7718c5753a8889f4f2

  • SSDEEP

    1536:IgEVCmnFrNt9O3GGbSjQW58b6g1Mb+KR0Nc8QsJq39:A3nFFO3GASz58be0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.44:443

Targets

    • Target

      e9db4cc2ee2cc30ce031741b3904982a6ccb5c6304c3c19fea08930d2eabed55

    • Size

      72KB

    • MD5

      0ea7612673462ec14d19e2fc634b9577

    • SHA1

      104ddf8af8008be91b346bbb7bda36ec892bfb14

    • SHA256

      e9db4cc2ee2cc30ce031741b3904982a6ccb5c6304c3c19fea08930d2eabed55

    • SHA512

      b4a9b1da38152b22320c29f168710714de0e6c75b0d95418bd1de07966f677ac60f9ba7a1931a7b4f49df20ab1e407b4bc5d7de0b377ab7718c5753a8889f4f2

    • SSDEEP

      1536:IgEVCmnFrNt9O3GGbSjQW58b6g1Mb+KR0Nc8QsJq39:A3nFFO3GASz58be0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Enterprise v15

Tasks